Ticket #9322: 9322.2.patch

wp-admin/edit-form-advanced.php

@@ -595 +595 @@
 <div id="post-body-content" class="has-sidebar-content">
 <div id="titlediv">
 <div id="titlewrap">
-        <input type="text" name="post_title" size="30" tabindex="1" value="<?php echo attribute_escape($post->post_title); ?>" id="title" autocomplete="off" />
+        <input type="text" name="post_title" size="30" tabindex="1" value="<?php echo attribute_escape( htmlspecialchars( $post->post_title ) ); ?>" id="title" autocomplete="off" />
 </div>
 <div class="inside">
 <?php $sample_permalink_html = get_sample_permalink_html($post->ID); ?>